IN THE CLAIMS 

The following is a complete listing of the claims in this appUcation, reflects 
all changes currently being made to the claims, and replaces all earlier versions and all 
earher listings of the claims: 

1 . (Currently Amended) A system for performing penetration testing 
of a target computer network by installing a remote agent in a target host of the target 
computer network, the system comprising: 

a local agent provided in a console and configured to receive and execute 

commands; 

a user interface provided in the console and configured to send commands 
to and receive information from the local agent, process the information, and present the 
processed information; 

a database configured to store the information received from the local agent; 

a network interface connected to the local agent and configured to 
communicate via a network with the remote agent installed in the target host of the target 
computer network; and 

security vulnerability exploitation modules for execution by the local agent 
and/or the remote agents 

wherein the remote agent comprises at least one of: a system-calls proxy 
server configured to receive and execute, in the target host, system calls received via the 
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network, and a virtual machine configured to execute, in the target host, scripting language 



instructions received via the network . 



2. (Original) The system of claim 1, wherein the user interface enables 
a user to select one of the modules and initiate execution of the selected module on either 
the local agent or the remote agent. 

3. (Original) The system of claim 1, wherein the user interface 
provides a graphical representation of the target computer network. 

4. (Currently Amended) A method for performing penetration testing 
of a target computer network, comprising: 

installing a remote agent in a target host of the target computer network; 

executing a command using a local agent provided in a console; 

receiving information fi-om the local agent in a user interface provided in the 

console; 

presenting the information received fi-om the local agent to a user; 

storing the information received from the local agent in a database; 

communicating via a network with the remote agent installed in the target 
host of the target computer network; and 

providing security vulnerability exploitation modules for execution by the 
local agent and/or the remote agents 
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wherein the remote agent comprises at least one of: a system-calls proxy 
server configured to receive and execute, in the tarRet host, system calls received via the 
network, and a virtual machine configured to execute, in the target host, scripting language 
instructions received via the network . 

5. (Original) The method of claim 4, further comprising: 
selecting, using the user interface, one of the modules; and 

initiating execution of the selected module on either the local agent or the 

remote agent. 

6. (Original) The method of claim 4, further comprising providing a 
graphical representation of the target computer network using the user interface. 

7. (Currently Amended) Computer code embodied in a computer- 
readable medium for performing penetration testing of a target computer network, the 
computer code comprising code for: 

installing a remote agent in a target host of the target computer network; 

executing a command using a local agent provided in a console; 

receiving information fi-om the local agent in a user interface provided in the 

console; 

presenting the information received from the local agent to a user; 
storing the information received fi-om the local agent in a database; 
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commmiicating via a network with the remote agent installed in the target 
host of the target computer network; and 

providing security vulnerability exploitation modules for execution by the 
local agent and/or the remote agents 

wherein the remote agent comprises at least one of: a system-calls proxv 
server configured to receive and execute, in the target host, system calls received via the 
network, and a virtual machine configured to execute, in the target host, scripting language 
instructions received via the network . 

8. (Original) The computer code of claim 7, further comprising code 

for: 

selecting, using the user interface, one of the modules; and 

initiating execution of the selected module on either the local agent or the 

remote agent. 

9. (Original) The computer code of claim 7, further comprising code 
for providing a graphical representation of the target computer network using the user 
interface. 

10. (Currently Amended) An agent embodied in a computer-readable 
medium for use in a system for performing penetration testing of a target computer network 
having a target host , the agent comprising: 
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a system-calls proxy server configured to receive and execute , in the target 
host, system calls received via a network; and 

a virtual machine configured to execute , in the target host, scripting 
language instructions received via the network^ 

wherein the system calls received via the network are routed to the system- 
calls proxy server and the scripting language instructions received via the network are 
routed to the virtual machine . 



1 1 . (Currently Amended) The agent of claim 1 0, further comprising an 
execution engine configured to control the system-calls proxy server and the virtual 
machine, wherein the system calls and the scripting language instructions are routed to the 
system-calls proxy server and the virtual machine, respectively, by the execution engine. 



12. (Original) The agent of claim 1 1 , fiirther comprising a remote 
procedure call module configured to receive commands from the network formatted in a 
remote procedure call protocol and pass the commands to the execution engine. 



13. (Currently Amended) An agent embodied in a computer-readable 
medium for use in a system for performing penetration testing of a target computer 
networ k, having a target host , the agent comprising: 

a system-calls proxy server configured to receive and execute , in the target 
host, system calls received via a network; 
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a virtual machine configured to execute , in the target host, scripting 
language instructions received via the network; 

a secure communication module configured to provide secure 
communication between the virtual machine and the network; 

an execution engine configured to control the system-calls proxy server and 
the virtual machine, wherein the system calls and the scripting language instructions are 
routed to the system-calls proxy server and the virtual machine, respectively, by the 
execution engine; 

a remote procedure call module configured to receive commands via the 
network formatted in a remote procedure call protocol and pass the commands to the 
execution engine; and 

a second secure communication module configured to provide secure 
communication between the remote procedure call module and the network. 

14. (Currently Amended) A method for performing penetration testing 
of a target network, comprising the steps of: 

executing a first module in a console having a user interface, the first 
module being configured to exploit a security vulnerabiUty in a first target host of the target 
network; 

installing a first remote agent in the first target host, the first remote agent 
being configured to communicate with the console and a second remote agent; and 
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executing a second module in the first remote agent, the second module 
being configured to exploit a security vulnerability in a second target host of the target 
network^ 

wherein the first remote agent comprises at least one of: a system-calls 
proxy server configured to receive and execute, in the target host, system calls received via 
the network, and a virtual machine configured to execute, in the target host, scripting 
language instructions received via the network . 



15. (Original) The method of claim 14, fiarther comprising installing a 
second remote agent in the second target host of the target network, the second remote 
agent being configured to communicate with the first remote agent. 



1 6. (Currently Amended) A system for performing penetration testing 
of a target network, comprising: 

a console having a user interface; 

a first module configured to execute in the console to exploit a security 
vulnerability in a first target host of the target network; 

a first remote agent installed in the first target host, the first remote agent 
being configured to communicate with the console and a second remote agent; and 

a second module configured to execute in the first remote agent to exploit a 
security vulnerability in a second target host of the target network^ 



wherein the first remote agent comprises at least one of: a system-calls 
proxy server configured to receive and execute, in the target host, system calls received via 
the network, and a virtual machine configured to execute, in the target host, scripting 
language instructions received via the network . 

17. (Original) The system of claim 16, fiirther comprising a second 
remote agent installed in the second target host of the target network, the second remote 
agent being configured to communicate with the first remote agent. 

18. (Currently Amended) Computer code for performing penetration 
testing of a target network, the computer code comprising code for: 

executing a first module in a console having a user interface, the first 
module being configured to exploit a security vuhierability in a first target host of the target 
network; 

installing a first remote agent in the first target host, the first remote agent 
being configured to communicate with the console and a second remote agent; and 

executing a second module in the first remote agent, the second module 
being configured to exploit a security vulnerability in a second target host of the target 
network^ 

wherein the first remote agent comprises at least one of: a system-calls 
proxy server configured to receive and execute, in the target host, system calls received via 
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the network, and a virtual machine configured to execute, in the target host, scripting 
language instructions received via the network . 

19. (Original) The computer code of claim 18, further comprising code 
for installing a second remote agent in the second target host of the target network, the 
second remote agent being configured to communicate with the first remote agent. 

20. (Currently Amended) A method for performing penetration testing 
of a target network, comprising the steps of 

executing a first module to exploit a security vulnerability of a first target 
host of the target network; 

installing a first remote agent in the first target host as a result of exploiting 
the security vulnerability of the first target host; 

sending a system call to the first remote agent via a network; and 

executing the system call in the first target host using a system-calls proxv 
[[proxycall]] server of the first remote agent to exploit a security vulnerability of a second 
target host^ 

wherein the svstem call comprises a computer instruction that is executed in 
an operating system of the first target host . 

2 1 . (Currently Amended) A method for performing penetration testing 
of a target network, comprising the steps of 
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executing a first module to exploit a security vulnerability of a first target 
host of the target network; 

installing a first remote agent in the first target host as a result of exploiting 
the security vulnerability of the first target host; 

executing in the first remote agent a second module that generates a system 

call; and 

executing the system call in the first target host to exploit a security 
vulnerability of a second target host^ 

wherein the svstem call comprises a computer instruction that is executed in 
an operating svstem of the first target host . 



22. (Currently Amended) A method for performing penetration testing 
of a target network, comprising the steps of: 

executing a first module to exploit a security vulnerability of a first target 
host of the target network; 

installing a first remote agent in the first target host as a result of exploiting 
the security vuhierability of the first target host; 

executing a second module in the first remote agent that generates a system 

call; 

installing a second remote agent in a [[the]] second target host as a result of 
exploiting a security vulnerability of the second target host; 
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s'ending the system call generated by the second module to the second 
remote agent via a network; and 

executing the system call in the second target host using a system-calls 
proxy [[proxycall]] server of the second remote agents 

wherein the system call comprises a computer instruction that is executed in 
an operating system of the second target host . 

23. (Currently Amended) A method for performing penetration testing 
of a target network, comprising the steps of: 

executing a first module to exploit a security vulnerability of a first target 
host of the target network; 

installing a first remote agent in the first target host as a result of exploiting 
the security vulnerability of the first target host; 

installing a second remote agent in the second target host as a result of 
exploiting a security vulnerability of the second target host; 

sending a system call to the first remote agent; 

sending the system call firom the first remote agent to the second remote 

agent; and 

executing the system call in the second target host using a system-calls 
proxy [[proxycall]] server of the second remote agents 

wherein the system call comprises a computer instruction that is executed in 
an operating system of the second target host . 
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24. (Currently Amended) A method for performing penetration testing 
of a target network, comprising the steps of: 

installing a first remote agent in [[the]] a first target host of the target 
network , the first remote agent having a system-calls proxy server configured to receive 
and execute system calls; 

executing in the first remote agent a system call received via a networ k, the 
system call comprising a computer instruction that is executed in an operating system of 
the first target host : 

installing a second remote agent in the first target host, the second remote 
agent having a system-calls proxy server configured to receive and execute system calls 
and a virtual machine configured to execute scripting language instructions; and 

executing in the second remote agent a scripting language instruction or a 
system call [[, the system call being]] received via the network. 

25. (Currently Amended) Computer code for performing penetration 
testing of a target network, the code comprising code for: 

executing a first module to exploit a security vulnerability of a first target 
host of the target network; 

installing a first remote agent in the first target host as a result of exploiting 
the security vulnerability of the first target host; 
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sending a system call to the first remote agent via a network; and 
executing the system call in the first target host using a system-calls proxy 
[[proxycall]] server of the first remote agent to exploit a security vulnerability of a second 
target hos t, the system call comprising a computer instruction that is executed in an 
operating system of the first target host . 

26. (Currently Amended) Computer code for performing penetration 
testing of a target network, the code comprising code for: 

executing a first module to exploit a security vulnerability of a first target 
host of the target network; 

instalUng a first remote agent in the first target host as a result of exploiting 
the security vulnerability of the first target host; 

executing in the first remote agent a second module that generates a system 

call; and 

executing the system call in the first target host to exploit a security 
vuhierability of a second target hos t, the system call comprising a computer instruction that 
is executed in an operating system of the first target host . 

27. (Currently Amended) Computer code for performing penetration 
testing of a target network, the code comprising code for: 

executing a first module to exploit a security vulnerability of a first target 
host of the target network; 
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installing a first remote agent in the first target host as a result of exploiting 
the security vulnerability of the first target host; 

executing a second module in the first remote agent that generates a system 

call; 

installing a second remote agent in the second target host as a result of 
exploiting a security vulnerability of the second target host; 

sending the system call generated by the second module to the second 
remote agent via a network; and 

executing the system call in the second target host using a system-calls 
proxy [[proxycall]] server of the second remote agent , the system call comprising a 
computer instruction that is executed in an operating system of the second target host . 

28. (Currently Amended) Computer code for performing penetration 
testing of a target network, the code comprising code for: 

executing a first module to exploit a security vulnerability of a first target 
host of the target network; 

installing a first remote agent in the first target host as a result of exploiting 
the security vulnerability of the first target host; 

installing a second remote agent in the second target host as a result of 
exploiting a security vulnerability of the second target host; 

sending a system call to the first remote agent; 
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sending the system call from the first remote agent to the second remote 

agent; and 

executing the system call in the second target host using a system-calls 
proxy [[proxycall]] server of the second remote agent , the system call comprising a 
computer instruction that is executed in an operating system of the second target host . 

29. (Currently Amended) Computer code for performing penetration 
testing of a target network, the code comprising code for: 

instaUing a first remote agent in the first target host, the first remote agent 
having a system-calls proxy server configured to receive and execute system calls; 

executing in the first remote agent a system call received via a networ k, the 
system call comprising a computer instruction that is executed in an operating system of 
the first target host : 

installing a second remote agent in the first target host, the second remote 
agent having a system-calls proxy server configured to receive and execute system calls 
and a virtual machine configured to execute scripting language instructions; and 

executing in the second remote agent a scripting language instruction or a 
system call [[, the system call being]] received via the network. 
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